Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: TAvgfMcEht+wftd8rRkDwseik6dfqfRDV5YA8CSdBX4=
Subject key identifier: 29:6E:74:53:EA:28:D5:10:4B:A1:5C:66:E7:DE:BB:E4:2A:34:64:3D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1A4E4147ACE4A3E41FC857721B1A9D21F49D478B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215287.roa
Signing time: Tue 08 Apr 2025 19:23:32 +0000
ROA not before: Tue 08 Apr 2025 19:18:32 +0000
ROA not after: Tue 07 Apr 2026 19:23:32 +0000
asID: 215287
IP address blocks: 46.203.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4e:41:47:ac:e4:a3:e4:1f:c8:57:72:1b:1a:9d:21:f4:9d:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 8 19:18:32 2025 GMT
Not After : Apr 7 19:23:32 2026 GMT
Subject: CN=296E7453EA28D5104BA15C66E7DEBBE42A34643D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:aa:e8:8b:e6:65:40:88:14:ad:25:0b:1f:
99:6a:b1:f2:a9:50:19:c5:16:24:bc:b5:72:56:e5:
bc:43:09:ee:29:7c:2e:41:2e:da:07:94:33:33:62:
0a:5b:95:c2:63:34:d9:d7:38:8d:42:7a:60:c3:50:
27:c8:35:61:6c:e0:d2:51:10:86:7a:fe:b5:d4:ec:
61:e2:c9:ee:db:f6:40:1b:80:cd:80:5a:e1:29:b4:
54:58:ef:5b:8c:25:45:97:ff:b3:76:22:8d:ab:08:
8d:1b:34:9e:1b:9b:c5:79:41:4d:2f:4a:0c:53:d3:
00:73:3f:42:40:24:ca:34:d0:cb:93:84:7f:01:c2:
f7:7c:e5:f5:e2:57:ab:34:bd:4c:47:ca:46:cb:02:
db:45:10:3d:32:2f:9d:6c:1b:e6:9c:2c:86:24:df:
3a:27:48:e5:1d:1c:59:54:e7:9c:f0:ee:99:db:80:
32:ac:64:0d:bc:28:b5:e0:6b:fa:6b:ef:38:bf:93:
29:d5:98:e8:7b:b4:0a:ed:dd:f6:45:ab:80:00:4d:
d5:61:1d:ea:f2:97:f8:f9:b4:87:5f:0d:96:cc:c8:
a9:46:60:95:c5:b5:d0:c3:cf:5e:b2:c4:f8:78:0d:
93:b9:22:0c:8e:70:03:fd:cf:b7:89:13:17:21:6d:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:74:53:EA:28:D5:10:4B:A1:5C:66:E7:DE:BB:E4:2A:34:64:3D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:72:0d:b2:ce:41:09:1b:08:1d:4c:5c:41:dc:b6:1a:51:04:
2b:11:d1:9d:bd:a1:05:e2:23:24:2b:56:3b:d6:d1:36:12:7d:
b7:4a:b7:b2:e4:d3:c9:5f:6a:2a:79:69:64:97:b4:74:50:60:
f0:cf:4b:19:83:df:43:a9:21:20:f8:ce:ac:6c:4d:d2:6e:bc:
28:01:9c:0a:5d:49:d6:28:37:2b:ff:d7:9c:31:4a:ac:00:75:
02:1a:4a:14:41:77:53:4d:af:ca:2b:2b:67:93:58:93:f3:0b:
d9:6a:89:82:94:c5:77:1b:6f:9a:ea:38:f0:eb:b4:b0:a3:93:
8a:c1:97:12:eb:7b:75:69:f4:3c:36:cc:60:ec:08:e1:7e:b1:
f0:89:c9:8d:3d:8e:39:c7:9a:a8:39:ac:cd:6d:c4:65:e3:87:
71:c1:b4:4f:8c:5c:bd:eb:4b:74:21:86:0b:28:b8:37:77:af:
81:3e:93:6d:92:d0:47:a2:84:d5:0c:e4:dc:e8:c9:04:a1:05:
1c:95:51:f9:f0:12:9e:56:ec:1f:46:bd:c1:85:69:59:7d:8f:
e6:76:3a:1e:fb:01:ea:f4:1f:a3:03:38:e6:3f:bb:65:d0:81:
a6:6a:e8:d8:f4:a0:14:93:46:e8:80:2f:63:78:b2:1d:e0:cf:
84:21:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net